{"action":"Upgrade manila to 7.4.1 or later.","affected":[{"fixed":"7.4.1","introduced":"0"},{"fixed":"8.1.1","introduced":"8.0.0"},{"fixed":"9.1.1","introduced":"9.0.0"}],"component":"manila","cve_ids":["CVE-2020-9543"],"ecosystem":"PyPI","epss":0.01339,"exploited":false,"fixed_versions":["7.4.1","8.1.1","9.1.1"],"ghsa_id":"GHSA-jx7v-gmqc-6xrj","id":"tcs_01M5KGASJXYYT11HQ3P31YTV3X","modified_at":"2026-06-10T17:02:02.966039371Z","published_at":"2020-03-12T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-63","https://bugs.launchpad.net/manila/+bug/1861485","http://www.openwall.com/lists/oss-security/2020/03/12/1","https://security.openstack.org/ossa/OSSA-2020-002.html","https://github.com/advisories/GHSA-jx7v-gmqc-6xrj"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-63","url":"https://osv.dev/vulnerability/PYSEC-2020-63"}],"summary":"OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attacke"}